moved login headers to front-page